Unscored severity · published May 10, 2006
CVE-2006-2298
The Internet Key Exchange version 1 (IKEv1) implementation in the libike library in Solaris 9 and 10 allows remote attackers to cause a denial of service (in.iked daemon crash)…
–
CVSS
2.8%
EPSS
No
On KEV
Description
The Internet Key Exchange version 1 (IKEv1) implementation in the libike library in Solaris 9 and 10 allows remote attackers to cause a denial of service (in.iked daemon crash) via crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.8% · higher than 86% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IK
Internet Key Exchange · Internet Key Exchange
1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-2298
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-2298
Vendor Advisory
http://secunia.com/advisories/20050
securitytracker.com
http://securitytracker.com/id?1016043
sunsolve.sun.com
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102246-1
www.ee.oulu.fi
http://www.ee.oulu.fi/research/ouspg/protos/testing/c09/isakmp/
www.niscc.gov.uk
http://www.niscc.gov.uk/niscc/docs/re-20051114-01014.pdf?lang=en
www.securityfocus.com
http://www.securityfocus.com/bid/17902
More from Internet Key Exchange
–
CVE-2006-1646
The Internet Key Exchange version 1 (IKEv1) implementation (isakmp_agg.c) in the Shoichi Sakane KAME Project racoon, as used by NetBSD 1.6, 2.x before 20060119, certain FreeBSD…
–
CVE-2005-3666
Multiple unspecified format string vulnerabilities in multiple unspecified implementations of Internet Key Exchange version 1 (IKEv1) have multiple unspecified attack vectors and…
–
CVE-2005-3667
Multiple unspecified vulnerabilities in multiple unspecified implementations of Internet Key Exchange version 1 (IKEv1) have multiple unspecified attack vectors and impacts…
–
CVE-2005-3668
Multiple buffer overflows in multiple unspecified implementations of Internet Key Exchange version 1 (IKEv1) have multiple unspecified attack vectors and impacts related to denial…